This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify turnkey-cakephp-12.1-squeeze-amd64-xen.tar.bz2.sig
      gpg: Signature made Tue Jun  4 12:45:54 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  cc8f6cf918b5d717d69c53caac60f30373bdcb17
    * md5sum   b55a175ff5007ba6fa3a048a48c0e0df

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJRreF7AAoJEIXCXpWhbrlNTyIH/360lgwGMMXpOMSmfIizKwBn
ez0gEovRI23bQMYog/qK6shocnWYO7xYLQlVTzhai7YANgiu/ZaQXViZfTmYfB+x
HVt8mbkXn5pfHYJio+iBZb9K6YI6j7yZXF4pkfK0Lkon5lGVasJ4O/3ezrGIar5S
M7ITbe1ix7X6DgpOOCBe/WYBJ8aRNzcRE1BVi3qx0g1ZsxaXytkZI/ec7SZ8p2Eo
qs4c8wy8XR1z4goMSj8VMDJD0VSzRHwfSjd29J4OtaoW1jnJDwIrQoWQogFDQB7u
T+StlsWxJQUXC2TILhilKSh4KXwG2DN1ixVqgw1JZNgWettem/UhA0XjL+FdR2Y=
=wZHk
-----END PGP SIGNATURE-----